{
	"SPDXID":"SPDXRef-DOCUMENT",
	"name":"mm-common-0.1.0.5-1.oe2409.aarch64.rpm",
	"spdxVersion":"SPDX-2.2",
	"creationInfo":{
		"created":"2024-09-30T03:30:07.5589037Z",
		"creators":"[openeuler_creator]"
	},
	"dataLicense":"CC0-1.0",
	"documentNamespace":"https://repo.openeuler.org/security/data/sbom/mm-common-0.1.0.5-1.oe2409.aarch64.rpm",
	"packages":[
		{
			"SPDXID":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-2176f3ae-7ae1-4a6b-8ece-28785ea9b052",
			"name":"bash",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"0648f5dde35fc9fcf57a6a9c95dae3273cbb784ba492931ff20874906827ed39"
				}
			],
			"description":"Bash is the GNU Project's shell. Bash is the Bourne Again SHell. Bash is an sh-compatible\nshell that incorporates useful features from the Korn shell (ksh) and C shell (csh). It is\nintended to conform to the IEEE POSIX P1003.2/ISO 9945.2 Shell and Tools standard. It offers\nfunctional improvements over sh for both programming and interactive use. In addition, most\nsh scripts can be run by Bash without modification.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/bash@5.2.21-1.oe2409?arch=aarch64&epoch=0&upstream=bash-5.2.21-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/bash",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"It is the Bourne Again Shell",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:5.2.21-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-cb4e502c-f7f9-4e30-b218-062d461c03bb",
			"name":"coreutils",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"2f5af68ccffa26a602437b1920467462bfd75facc2bb18bdc2fd9140eb7dc702"
				}
			],
			"description":"These are the GNU core utilities.  This package is the combination of\nthe old GNU fileutils, sh-utils, and textutils packages.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/coreutils@9.5-4.oe2409?arch=aarch64&epoch=0&upstream=coreutils-9.5-4.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.gnu.org/software/coreutils/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A set of basic GNU tools commonly used in shell scripts",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:9.5-4.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-doxygen-1.10.0-40760bd6-b41a-411d-9056-086c718a5451-5f72eaee-1d33-48a7-a97c-605f1c510dc6",
			"name":"doxygen",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"89fa741a2a9b47b40b4fbe72a7a6dee375d75ea09a30ba73473278d1d00f500b"
				}
			],
			"description":"Doxygen is the de facto standard tool for generating documentation from\nannotated C++ sources, but it also supports other popular programming\nlanguages such as C, Objective-C, C#, PHP, Java, Python, IDL (Corba,\nMicrosoft, and UNO/OpenOffice flavors), Fortran, VHDL, Tcl, and to some\nextent D.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/doxygen@1.10.0-1.oe2409?arch=aarch64&epoch=1&upstream=doxygen-1.10.0-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://www.doxygen.nl",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"A documentation system for C/C++",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"1:1.10.0-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-graphviz-10.0.1-e2fb03e3-868b-4382-b93b-e3545055dd25-11c90685-d2be-45f3-9ea2-3bcd078d1e79",
			"name":"graphviz",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"6acec1f9f7a609e6d8fdb66f21d2c6b07db56b3b3ad514d8c570cc3f07123b5a"
				}
			],
			"description":"Graphviz is open source graph visualization software. Graph visualization is a way of representing structural\n information as diagrams of abstract graphs and networks. It has important applications in networking, bioinformatics,\n software engineering, database and web design, machine learning, and in visual interfaces for other technical domains.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/graphviz@10.0.1-1.oe2409?arch=aarch64&epoch=0&upstream=graphviz-10.0.1-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://www.graphviz.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Graph Visualization Tools",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:10.0.1-1.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-libxslt-1.1.42-0f6c511c-cb5f-40e2-905e-36df8e8b0b16-e08cdf09-8cc5-4669-9822-47eb429e5ad3",
			"name":"libxslt",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"b12838e004f882b1592f261c105bcd7ec8743a2cbb309ea31f44decc82cbea1c"
				}
			],
			"description":"Libxslt is the XSLT C library developed for the GNOME project",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/libxslt@1.1.42-2.oe2409?arch=aarch64&epoch=0&upstream=libxslt-1.1.42-2.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"https://gitlab.gnome.org/GNOME/libxslt",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"XSLT Transformation Library",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.1.42-2.oe2409"
		},
		{
			"SPDXID":"SPDXRef-rpm-pkgconf-1.9.5-42f1ae9e-ac87-43fd-b92d-e5d94e004ed2-c3164983-acc3-4831-afc8-f76329c5fbf3",
			"name":"pkgconf",
			"checksums":[
				{
					"algorithm":"SHA256",
					"checksumValue":"f2d8aaef2f08aa47b0e5b9e74fb4162b76bde98650eb79bd587cc1b6fc437e06"
				}
			],
			"description":"pkgconf is a program which helps to configure compiler and linker flags for development frameworks.\nIt is similar to pkg-config from freedesktop.org, providing additional functionality while also\nmaintaining compatibility.",
			"downloadLocation":"NOASSERTION",
			"externalRefs":[
				{
					"referenceCategory":"PACKAGE_MANAGER",
					"referenceLocator":"pkg:rpm/pkgconf@1.9.5-1.oe2409?arch=aarch64&epoch=0&upstream=pkgconf-1.9.5-1.oe2409.src.rpm",
					"referenceType":"purl"
				}
			],
			"filesAnalyzed":false,
			"homepage":"http://pkgconf.org/",
			"sourceInfo":"acquired package info from repodata DB: repodata/6e742f68b2ae62313d1861c02b7faa39b44c963cbbc6ac979fb577de9af9babc-primary.sqlite.bz2",
			"summary":"Package compiler and linker metadata toolkit",
			"supplier":"Organization: http://openeuler.org",
			"versionInfo":"0:1.9.5-1.oe2409"
		}
	],
	"relationships":[
		{
			"spdxElementId":"SPDXRef-rpm-mm-common-1.0.5-83e396a2-835f-468a-b923-aea57bba9bad",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-bash-5.2.21-79ee3f1b-b075-4c10-8970-bf7c22384c2c-2176f3ae-7ae1-4a6b-8ece-28785ea9b052"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mm-common-1.0.5-83e396a2-835f-468a-b923-aea57bba9bad",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-coreutils-9.5-3bf74e8c-0121-4371-b650-f2040d5a9a56-cb4e502c-f7f9-4e30-b218-062d461c03bb"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mm-common-1.0.5-83e396a2-835f-468a-b923-aea57bba9bad",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-doxygen-1.10.0-40760bd6-b41a-411d-9056-086c718a5451-5f72eaee-1d33-48a7-a97c-605f1c510dc6"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mm-common-1.0.5-83e396a2-835f-468a-b923-aea57bba9bad",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-graphviz-10.0.1-e2fb03e3-868b-4382-b93b-e3545055dd25-11c90685-d2be-45f3-9ea2-3bcd078d1e79"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mm-common-1.0.5-83e396a2-835f-468a-b923-aea57bba9bad",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-libxslt-1.1.42-0f6c511c-cb5f-40e2-905e-36df8e8b0b16-e08cdf09-8cc5-4669-9822-47eb429e5ad3"
		},
		{
			"spdxElementId":"SPDXRef-rpm-mm-common-1.0.5-83e396a2-835f-468a-b923-aea57bba9bad",
			"relationshipType":"DEPENDS_ON",
			"relatedSpdxElement":"SPDXRef-rpm-pkgconf-1.9.5-42f1ae9e-ac87-43fd-b92d-e5d94e004ed2-c3164983-acc3-4831-afc8-f76329c5fbf3"
		}
	]
}